Sharelock – Securely share data • Hacker News Board

Re: Sharelock – Securely share data

#31

Post by chinathrow » Thu, Feb 26, 2015, 11:00 AM UTC

lilyball wrote: post #9

From the "Security" page: > Urls are ephemeral, they are NOT stored anywhere (neither your secrets). The content you share lives encrypted in the URL. > The decrypted content can ONLY be accessed by the people that you shared shared the data with by means of login and email verification (as opposed to, let's say, Dropbox links which can be accessed by anyone who has the link). (note: "shared shared" is present in the…

And at least on the web page, Google Web Fonts included.

Yes, they track usage. Yes, they log URLs.

Same goes for jquery CDN and CloudFlare. And 0Auth.com

Every. URL. Tracked.

Oh, and it utterly fails with non FB, Gmail, Twitter, MSFT linked address.

Re: Sharelock – Securely share data

#32

Post by aakash » Thu, Feb 26, 2015, 11:39 AM UTC

didgeoridoo wrote: post #26

No comment on the underlying technology or security, but damned if that isn't one of the best "explainer" animations I've ever seen. I'm adding this to my personal "awesome onboarding" catalogue.

Would you know any tool to quickly create such onboarding animations?

Re: Sharelock – Securely share data

#33

Post by therealidiot » Thu, Feb 26, 2015, 12:01 PM UTC

avenpace wrote: post #29

Strange coincidence that we share same name with bit similar concept under different tld. Mine is http://sharelock.co Kudos for nice ui

Starts asking for location on load, tab closed :(

Re: Sharelock – Securely share data

#34

Post by IanCal » Thu, Feb 26, 2015, 12:26 PM UTC

lilyball wrote: post #9

From the "Security" page: > Urls are ephemeral, they are NOT stored anywhere (neither your secrets). The content you share lives encrypted in the URL. > The decrypted content can ONLY be accessed by the people that you shared shared the data with by means of login and email verification (as opposed to, let's say, Dropbox links which can be accessed by anyone who has the link). (note: "shared shared" is present in the…

> The content you share lives encrypted in the URL.

I'm a little confused.

If the encrypted data is "in the url" and you need to share the url, then why not just share the encrypted data itself?

This seems like it adds a lot of problems to solve key distribution.

Edit - it doesn't do key distribution, the encryption and decryption are done on the server.

Re: Sharelock – Securely share data

#35

Post by didgeoridoo » Thu, Feb 26, 2015, 1:39 PM UTC

aakash wrote: post #32

didgeoridoo wrote: post #26

No comment on the underlying technology or security, but damned if that isn't one of the best "explainer" animations I've ever seen. I'm adding this to my personal "awesome onboarding" catalogue.

Would you know any tool to quickly create such onboarding animations?

This one looks like it's done with GreenSock, but you could probably get away with using Abode Edge Animate (more WYSIWYG, Flash-like editing experience).

Re: Sharelock – Securely share data

#36

Post by EGreg » Thu, Feb 26, 2015, 1:59 PM UTC

Sign in with google? Facebook?

So you have to trust them, since they can get your data. No?

If anything, Apple's iMessage already lets you send secure data this way. Apple doesn't hold the keys, and messages are encrypted locally.

The site doesn't scroll properly on iPhone 5. Probably was designed with iPhone 6 in mind.

Otherwise - this is a cool concept! Just fix the auth.

Re: Sharelock – Securely share data

#37

Post by psandersen » Thu, Feb 26, 2015, 10:49 PM UTC

jonttaylor wrote: post #30

psandersen wrote: post #15

As others have point out this just means you have to trust Sharelock. While its slightly less user friendly, and it has its own security issues would the following be viable: 1) Sender clicks 'share a file' and no file is uploaded yet. 2) Email is sent to recipient, explaining that they have an encrypted file waiting for them, and takes them through creating a public key done in their browser via JavaScript (biggest…

Thoughts? I built it a couple years ago! :) Works almost exactly as you said, although you quickly run into problems with how much data you can store in javascript before the page blows up. http://www.senditonthenet.com/

Looks useful, thanks for sharing. Could probably get some good traction if the UI was as polished as Sharelock, its a real pain point working with confidential files and non tech savvy clients.

Have any of the improvements in javascript engines/web standards made javascript based public key encryption more viable?